PL charge City for alleged breaches of financial rules

danielwood5 said:
I thought the issue was the two guys that went to Liverpool had the login details of someone who still worked at City.
They then used his details to login and that's how it was discovered, there were logins on the external scouting system City were using from the guy still at City that happened when we knew he was elsewhere. They then traced the IP addresses to Liverpool.
We didn't take it and further as it turned out that there was a culture of password sharing at City and that would obviously be a massive issue and we'd have been in almost as much shit as Liverpool would have been for not controlling the data properly.
That was my understanding anyway, but your version of events is just as braindead and it sounds look this is more your area of expertise than mine.
Click to expand...
www.thisisanfield.com

Liverpool paid Man City £1m after allegedly hacking scouting system in 2013

News breaks six years after the alleged act.
www.thisisanfield.com www.thisisanfield.com
 
bobbyowenquiff said:
The migrant workers issue is a blatant distortion because the vast majority of companies (especially construction) are owned and managed by Western firms including the UK and the USA. There are more than 1,300 UK and US companies operating in Saudi. I have been told by someone who had a senior construction role in Saudi for ten years that some of the worst working conditions were on American and British run sites. If Herbert was a proper journaist he would have included this vital context.
Click to expand...
He`s probably just an ignorant **** and facts like your`s don`t exist in his small fucking brain cell.
 
calumdown said:
breaking news!!!

i have just been informed,

if you are going to make a boiled egg,
give it a firm shake before you put it into the water.
this will ensure the yolk is completely central.
Click to expand...
Technically, a spin rather than a shake. Centrifugal forces.
 
Damocles said:
Because City's IT security (used to at least) be a comedy show. They didn't want any more press attention on it than necessary

There's this thing in security called "ethical disclosure". Basically, if you as a security nerd find a way into the system of a big company then you report it to them and they'll give you a "bounty". Some of these are very generous and in the tens of thousands for ultra severe ones. Others not so much.

About 15ish years ago, I "ethically disclosed" to City that I could watch webcams of some of their internal meetings. Literally there were webcams in a bunch of meeting rooms that you could just sit and watch if you fancied it, without credentials, because they weren't properly locked down. They didn't even reply to my email let alone say cheers let alone say "oh you've saved us a bunch of money there, here's few quid". They fixed it within a day or two though. So if I bothered to go on a fishing expedition and find a bunch of other shit then what's my incentive to disclose if I wasn't a City fan? This is the stuff that leads to the email situation.

Do you know this "hack" that people talk about with Liverpool? Do you know what it was? When some staff left City, City didn't bother to cancel their access to our scouting apps. So they booted up their laptop one day, went to a webpage that hosts these types of things and were automatically logged in as City employees. Then probably pissed themselves laughing as they fed information to their new bosses.

The fact that our email system was hacked is possibly the least surprising thing that has ever happened in the history of the world. Our website is hackable. You can access City+ without subscription if you're technically inclined and know how to do a bit of JavaScript editing. Our ticketing system was hackable for a long time through credential spoofing. Football as an industry is laughably insecure compared to other industries. I absolutely guarantee you right now that there are people out there who are reading the emails of every major CEO in football. It's not a serious industry when it comes to infosec. Especially outside the PL, their security is done by some guy's kid who they think knows "a lot about those computers" because they play Roblox or something.

If a properly motivated hacking group ever decided to target ransomware towards the football industry then everyone would be absolutely fucked or they'd get away with millions.
Click to expand...
Do you know this "hack" that people talk about with Liverpool? Do you know what it was? When some staff left City, City didn't bother to cancel their access to our scouting apps. So they booted up their laptop one day, went to a webpage that hosts these types of things and were automatically logged in as City employees. Then probably pissed themselves laughing as they fed information to their new bosses.
======
This is not correct according to reports. They illicitly used the log in of Rob Newman who was still at City, hence the issue wasn’t discovered for some time.
IMG_2998.jpegIMG_2897.jpeg
 
levets said:
Do you know this "hack" that people talk about with Liverpool? Do you know what it was? When some staff left City, City didn't bother to cancel their access to our scouting apps. So they booted up their laptop one day, went to a webpage that hosts these types of things and were automatically logged in as City employees. Then probably pissed themselves laughing as they fed information to their new bosses.
======
This is not correct according to reports. They illicitly used the log in of Rob Newman who was still at City, hence the issue wasn’t discovered for some time.
View attachment 161818View attachment 161819
Click to expand...
Still just points to piss poor cyber security at city though - how did they come to have the other blokes login details?
 
levets said:
No just two.
Dave Fallows & Julian Ward
Click to expand...
"Sporting Director Michael Edwards and two former City scouts Dave Fallows and Julian Ward, who had made the move over to Anfield the year before the settlement was reached in September 2013, are the people in question alleged to have used the login details of a City scout to gain access to the system."

Ahh, I misread the bit about Michael Edwards, that's from the thisisanalfield link further back.
 
levets said:
This is not correct according to reports. They illicitly used the log in of Rob Newman who was still at City, hence the issue wasn’t discovered for some time.
Click to expand...

I've seen the reports and I heard a different story than the one presented. Either way should be an incredible embarrassment.

In 2012 I couldn't log in to World of Warcraft without using 2FA let alone the protected business intelligence of a company making hundreds of millions in revenue.
 
Mazzarelli's Swiss Cheese said:
Still just points to piss poor cyber security at city though - how did they come to have the other blokes login details?
Click to expand...
They were sharing login details and passwords, probably because they didn’t want to pay for a licence for each user who needs one so that everyone gets their own unique username and password. This case was a perfect example of why it’s a stupid idea to share login credentials but it’ll still be happening somewhere I bet.
 
oakiecokie said:
He`s probably just an ignorant **** and facts like your`s don`t exist in his small fucking brain cell.
Click to expand...
The lack of context paints a false picture. The UK has a huge growing problem with modern slavery with more than 19,000 cases a year reported. This pressure group claims that more than 100,000 people are trapped in slavery in this country. We have seen horrific incidents involving the abuse of farm workers and the multiple deaths of cockle pickers in Morecambe Bay. Deaths of construction workers in the UK are also on the rise. Why does Herbert fixate only on Abu Dhabi and try to link it to our football club all the time?

www.antislavery.org

Slavery in the UK

Modern slavery still thrives in Britain today, with up to 13,000 estimated to be victims of trafficking. Find out how people end up in slavery in the UK.
www.antislavery.org www.antislavery.org
 
You must log in or register to reply here.
Unread Posts

Don't have an account? Register now and see fewer ads!

SIGN UP
Back
Top